StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
sonatype/nexus3:3.53.04bd975493104
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
sonatype/nexus3:3.58.1586060431b64
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
soulou2019/angular-nginx:latesta3970f97c215
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
splunk/splunk-operator:2.0.0c4e0d3146226
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
springhack/frpc_ingress:latest4aceb821da88
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
spy86/rabbitmq-stomp:latestea649101b9fb
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
stakater/workshop-operator:v0.0.3897bf456cc97c
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
stashapp/stash:latest24dbd7607174
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
statcan/ckan:2.93921305425b8
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
subsquid/hydra-indexer-status-service:5.0.0-alpha.37a4136013909c
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
swaggerapi/swagger-ui:v4.12.00d7088d47928
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
swaggerapi/swagger-ui:v4.15.511b20aebb92c
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
swaggerapi/swagger-ui:v4.15.27ff9a86f35ff
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
taemon1337/image-api:0.0.1247bc1dc4f07
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
taemon1337/ingress-dashboard:0.0.10e8f5096c66bb
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
tdengine/tdengine:3.0.2.24140a4021ddb
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
thecampagnards/trafficlight-api:main7dca9d973837
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
thesisrobot/bitcoind:v23.016b368e4d52c
ncurses@6.3-2
6.3-2ubuntu0.1
1
thmmniii/fbs-core:v1.27.15438517d9fc2
ncurses@6.3-2
6.3-2ubuntu0.1
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
ncurses@6.3-2
6.3-2ubuntu0.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
ncurses@6.3-2
6.3-2ubuntu0.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
ncurses@6.3-2
6.3-2ubuntu0.1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
tpdock/freeradius:2.2.93da600c95a49
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
trinodb/trino:405ee80ab5eeab2
ncurses@6.3-2
6.3-2ubuntu0.1
1
tusproject/tusd:v1.10.01e457b59fd5b
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
typesense/typesense:0.23.03accb727cbe2
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
vexorian/dizquetv:1.4.37e2b99844a5c
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
voltha/voltha-cli:1.6.0c4e41e92f046
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
voltha/voltha-envoy:1.6.059ab2a00f712
ncurses@5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm3
1
voltha/voltha-netconf:1.6.037f80524c207
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
voltha/voltha-onos:5.1.8e038acb950d3
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
voltha/voltha-tester:1.7.0655c3048a602
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
voltha/voltha-voltha:1.6.0ff596b62de59
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
wallarm/sysbindings:v0.9.9c527865df85d
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
wavefronthq/proxy:9.2d1064d28f6eb
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.